First published: 01 Sep 2026
Last updated: 01 Sep 2026

Content written for

Individuals & families
Small & medium business
Large organisations & infrastructure
Government

This September, it is time to switch on multi-factor authentication (MFA) to help reduce the chances of cyber compromise.

In 2024-2025, 42% of industry, government and critical infrastructure sector incidents reported to ASD involved compromised accounts or credentials. This means that passwords alone are no longer enough to protect your personal and business information.

It is more important than ever for all Australians to add an extra layer of security by turning on phishing-resistant MFA, such as passkeys.

Passkeys are the easiest way to stay secure. They combine something you know (a PIN or biometrics) and something you have (a device) to grant you access to trusted digital accounts, services and platforms. Where platforms don’t support passkeys, opt for alternative two-factor authentication methods, such as an authenticator app.

Just one extra step, can help prevent a security incident. Lock down your digital life by enabling MFA across your email, banking and social media accounts, and spread the word about the importance of MFA for personal and professional security.

Head to Protect yourself: Multi-factor authentication for instructions on how to set up MFA for specific accounts and applications.

Was this helpful?
Yes this was helpful
No this was not helpful

Thanks for your feedback!

We welcome additional feedback below.

Was this information easy to understand?
Will you take action after reading this?
Did you find the information you were looking for?
Did the design and layout of this page meet your expectations?